Search: CVE-2026-28389

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	–	EPSS 0.8%	CVE-2026-28389Microsoft · Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo MediumEPSS 0.8%2026-04-11GCVE DatabaseCVE-2026-28389 CVE-2026-28389 is a vulnerability in Microsoft products, including Azure Linux versions 2.0 and 3.0, involving a possible NULL pointer dereference when processing CMS KeyAgreeRecipientInfo. This flaw can cause application crashes or denial of service. There is no CVSS score or detailed vendor advisory available, and no known exploits in the wild. No specific geographic targeting is indicated. EPSS 0.8%Vulnerability Microsoft Security Response Center CWE-476 #microsoft-security-response-ce	GCVE Database	2026-04-11

Page 1 of 1